dev.diameter.healthshareexchange.org

Issued by Amazon

About this certificate

This digital certificate with serial number 07:c8:17:9c:8b:e4:a9:d9:34:45:d8:1d:9d:1d:0d:6f was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.diameter.healthshareexchange.org

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:c8:17:9c:8b:e4:a9:d9:34:45:d8:1d:9d:1d:0d:6f
Serial Number (int): 10343534240510466388373987322100518255
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 35:02:84:c5:40:4c:75:8c:11:d6:99:e3:96:05:5a:36:ce:5a:e2:12
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): c7:48:c9:2d:a9:a5:9b:b5:49:7e:76:e9:35:12:cb:2e:dc:93:cb:33
Fingerprint (sha256): 4e:00:0e:88:3b:5f:50:a3:fe:16:52:e5:78:3d:8a:0a:1e:6f:b1:02:a8:7d:1f:0f:16:b4:5d:ea:79:0d:bf:8a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dev.diameter.healthshareexchange.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.diameter.healthshareexchange.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.diameter.healthshareexchange.org

Other certificates including the domain name healthshareexchange.org

(limited to 100 certificates)
hie.healthshareexchange.org
gradecda.healthshareexchange.org
thegrid.healthshareexchange.org
servicedesk.tangerinelife.com
hsxsepa.org
hie.healthshareexchange.org
hsxsepa.org
servicedesk.tangerinelife.com
helpdesk.roadandrail.com
iithelp.childrensmuseum.org
test.grade.healthshareexchange.org
healthshareexchange.org
grade.healthshareexchange.org
dev.gradecda.healthshareexchange.org
healthshareexchange.org
support.healthshareexchange.org
support.firsteagle.com
hie.healthshareexchange.org
servicedesk.tangerinelife.com
healthshareexchange.org
dev.gradecda.healthshareexchange.org
hie.healthshareexchange.org
servicedesk.tangerinelife.com
hie.healthshareexchange.org
portal.buyautopartsonline.shop
hsxsepa.org
hie.healthshareexchange.org
healthshareexchange.org
*.api.healthshareexchange.org
healthshareexchange.org
support.healthshareexchange.org
helpdesk.plan-roa.org
auth.dev.api.healthshareexchange.org
dev.diameter.healthshareexchange.org
enshare.healthshareexchange.org
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
healthshareexchange.org
portal.buyautopartsonline.shop
healthshareexchange.org
hsxsepa.org
hie.healthshareexchange.org
servicedesk.tangerinelife.com
healthshareexchange.org
servicedesk.tangerinelife.com
hie.healthshareexchange.org
servicedesk.tangerinelife.com
healthshareexchange.org
servicedesk.tangerinelife.com
healthshareexchange.org
helpdesk.plan-roa.org
healthshareexchange.org
support.firsteagle.com
gradecda.healthshareexchange.org
support.firsteagle.com
servicedesk.jalladgroup.com
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
hie.healthshareexchange.org
hie.healthshareexchange.org
servicedesk.tangerinelife.com
*.api.healthshareexchange.org
helpdesk.roadandrail.com
support.healthshareexchange.org
healthshareexchange.org
support.healthshareexchange.org
healthshareexchange.org
healthshareexchange.org
portal.buyautopartsonline.shop
itsm.questmindshare.com
dev.gradecda.healthshareexchange.org
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
test.grade.healthshareexchange.org
hsxsepa.org
hie.healthshareexchange.org
helpdesk.plan-roa.org
healthshareexchange.org
helpdesk.hpretiro.hi-precision.com.ph
itsm.questmindshare.com
hie.healthshareexchange.org
servicedesk.jalladgroup.com
iithelp.childrensmuseum.org
ncbahelpdesk.ncbal.com
servicedesk.tangerinelife.com
enshare.healthshareexchange.org
servicedesk.tangerinelife.com
thegrid.healthshareexchange.org
hie.healthshareexchange.org
iithelp.childrensmuseum.org
hie.healthshareexchange.org
test.gradecda.healthshareexchange.org
support.firsteagle.com
grade.healthshareexchange.org
test.gradecda.healthshareexchange.org
itsm.questmindshare.com

Certificate

The complete raw certificate details for dev.diameter.healthshareexchange.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf5ng3EoNGhXSEKW7Gel
s5zBIyfnXLfuqTZOTOWQZsWWOw8RwHGmVkzc9gVz2HMWHWljwVjOVNGRPY7BObYr
bW2iRvHLAhCcMXoGdzNSpMtpQgmXn4mQPxUnF8gO0mfko4JCwyuCMZUczdNJHGjD
WDxBaWIkvFqSgCFPHIPiyb63xk5DtiyKFHteIEgB8tCqPUhC8JA9sKJRc7w45Hmq
2bmvdN4AURrvPI7YW9vzsniiuPICre94daOH5Az7ryvElHyelNPuAR6+/Ci+NyOT
qOxTqlrSA6fzkFeKxmhUXgWV6b+g96LAAlAekEIchXponGqiULKZiudVR3jrCAKb
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10343534240510466388373987322100518255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.diameter.healthshareexchange.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23984491098912230633627411043553987955250611528909859446061921007899030626184972109433141319768172638556909581673254645681264134155975190431238166718114620359494593823483692640483668449836447670607442185815299912434356368544921446530077316032848108557140842405139958506933416622191572610205105568533802678827768390586626166478774075154860161814523043722663209302750044062965519016486809481863152401902548183850826440451967572343871390642181169644533833734657219876011016893759105307798296300496166519080732560585927163771183437905380739579157378108860396671101877360550849923531658803120121321094504756992887339784999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							350284c5404c758c11d699e396055a36ce5ae212
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.diameter.healthshareexchange.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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